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Abstract 


Electronic commerce freguently reguires a substantial exchange of 
information in order to complete a purchase or other transaction, 
especially the first time the parties communicate. A standard set of 
hierarchically-organized payment-related information field names in 
an XML syntax is defined so that this task can be more easily 
automated. This is the second version of an Electronic Commerce 
Modeling Language (ECML) and is intended to meet the requirements of 
RFC 3505. 
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1. Introduction 


Numerous parties are conducting business on the Internet using ad hoc 
fields and forms. The data formats and structure can vary 
considerably from one party to another. Where forms are filled out 
manually, some users find the diversity confusing, and the process of 
manually filling in these forms can be tedious and error prone. 


Software tools, including electronic wallets, can help this 
situation. Such tools can assist in conducting online transactions 
by storing billing, shipping, payment, preference, and similar 
information and using this information to complete the data sets 
required by interactions automatically. For example, software that 
fills out forms has been successfully built into browsers, as proxy 
servers, as helper applications to browsers, as stand-alone 
applications, as browser plug-ins, and as server-based applications. 
But the proliferation of more automated transaction software has been 
hampered by the lack of standards. 


ECML (Electronic Commerce Modeling Language) provides a set of 
hierarchical payment-oriented data structures that will enable 
automated software, including electronic wallets from multiple 
vendors, to supply and query for needed data in a more uniform 
manner. 
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Version 2.0 extends ECML Versions 1.0 [RFC2706] and 1.1 [RFC3106] as 
described in the appendix to this document. These enhancements 
include support for additional payment mechanisms and transaction 
information and use of XML as the exemplar syntax. 


ECML is designed to provide a simple baseline useful in a variety of 


contexts. Likely uses for ECML v2 are consumer payment information 
input and business-to-business transactions. At this time, the first 
is still likely to occur through HTML forms. The second is more 


likely to use XML documents. 
1.2. History and Relationship to Other Standards 


The ECML fields were initially derived from the W3C P3P base data 
schema [P3P.BASE] by the ECML Alliance as described in [RFC2706, 
RFC3106]. Technical development and change control of ECML was then 
transferred to the IETF. In version 2, ECML is extended by the 
fields in a W3C P3P Note related to eCommerce [P3P.ECOM], by 
[1508583], and other sources. Its primary exemplar form is now an 
XML syntax. 


2. Field Definitions, DID, and Schema 


ECML v2 is the definition and naming of a hierarchically structured 
set of fields and the provision of an optional XML syntax for their 
transmission. These fields can be encoded in other syntaxes. 
Regardless of the encoding used, the fields can be transmitted via a 
variety of protocols. 


Section 2.1 below lists and describes the fields, Section 2.2.1 
provides an XML DTD for use with the fields, and Section 2.2.2 
provides an XML schema. 


To conform to this document, field names must be named and 
hierarchically structured as closely to the structure and naming 
listed below as is practical given the syntax and transaction 
protocol in use. (NOTE: This does not impose any restriction on 
human visible labeling of fields, just on their name or names and 
structure as used in on-the-wire communication.) 


2.1. Field List and Descriptions 
The fields are listed below, along with the minimum data entry size 
allowed. Implementations may accept larger data sizes, if doing so 


makes sense, and, for some applications, they will need to allow for 
larger data sizes. 
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Note that these fields are hierarchically organized as indicated in 


this table by the embedded underscore (" ") characters. 
data transmission mechanisms may use this to reguest and send 


aggregates, such as Ecom Payment Card ExpDate 


Appropriate 


(to encompass all of a 


set of card expiry date components) or Ecom ShipTo (to encompass all 
the ship-to address components that a consumer is willing to 
marshalling, and unmarshalling of the 
components of such aggregates depend on the data transfer protocol 
used. The suggested syntax is XML as specified in Section 2.2. 


provide). The labeling, 


2.1.1. The Field List 


The table below is the ECML v2 field list. 


The NAME column gives the structured string name of each field as 
explained above. The MIN column below is the minimum data size that 


MUST be allowed for on data entry. 
valid contents of the field, 


cases, be prepared to receive a longer or shorter value. 
for example, the state/province name or 
phone number is longer than the MIN given below obviously must permit 


dealing with areas where, 


longer data entry. In some cases, however, there is a maximum size 
that makes sense, and where this is the case, 


documented in a Note for the field. 


it is usually 


It is NOT the minimum size for 
and merchant software should, 


in many 


Merchants 


The following fields are typically used to communicate from the 


customer to the merchant: 


FIELD NAME MIN Notes 
ship to title Ecom_ShipTo_Postal_Name_Prefix 4 ( 1) 
ship to first name Ecom_ShipTo_Postal_Name_First 15 (54) 
ship to middle name Ecom_ShipTo_Postal_Name_Middle 15 ( 2) 
ship to last name Ecom_ShipTo_Postal_Name_Last 15 (54) 
ship to name suffix Ecom_ShipTo_Postal_Name_Suffix 4 ( 3) 
ship to company name Ecom_ShipTo_Postal_Company 20 
ship to street linel Ecom_ShipTo_Postal_Street_Linel 20 ( 4) 
ship to street line2 Ecom_ShipTo_Postal_Street_Line2 20 ( 4) 
ship to street line3 Ecom_ShipTo_Postal_Street_Line3 20 ( 4) 
ship to city Ecom_ShipTo_Postal_City 22 
ship to state/province Ecom_ShipTo_Postal_StateProv 2 (5) 
ship to zip/postal code Ecom_ShipTo_Postal_PostalCode 14 ( 6) 
ship to country Ecom_ShipTo_Postal_CountryCode 2 (7 
ship to phone Ecom_ShipTo_Telecom Phone, Number 10 ( 8) 
ship to email Ecom ShipTo Online Email 40 ( 9) 
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pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 
pill 


to 
to 
to 
to 
to 
to 
to 
to 
to 
to 
to 
to 
to 
to 
to 


receipt 
receipt 
receipt 
receipt 
receipt 
receipt 
receipt 
receipt 


receipt 
receipt 
receipt 
receipt 
receipt 
receipt 
receipt 
receipt 


Name 


card 
card 
card 
card 


card 
card 
card 
card 
card 
card 


on 


title 

first name 
middle name 
last name 

name suffix 
company name 
street linel 
street line2 
street line3 
city 
state/province 
zip/postal code 
country 

phone 

email 


to 
to 
to 
to 
to 
to 
to 
to 


title 

first name 
middle name 
last name 
name suffix 
company name 
street linel 


street line2 
street line3 
city 


to 
to 
to 
to 
to 
to 
to 
to 


postal code 
country 
phone 

email 


card 


type 

number 
verification value 
issuer number 


expire date day 
expire date month 
expire date year 
valid date day 
valid date month 
valid date year 
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Ecom_BillTo_Postal Name _ Prefix 
Ecom_BillTo_Postal Name First 
Ecom BillTo. Postal. Name, Middle 
Ecom BillTo. Postal. Name. Last 
Ecom BillTo. Postal Name. Suffix 
Ecom BillTo Postal Company 
Ecom BillTo. Postal. Street Linel 
Ecom BillTo. Postal. Street. Line2 
Ecom BillTo. Postal. Street Line3 
Ecom BillTo Postal City 

Ecom BillTo. Postal. StateProv 
Ecom BillTo. Postal. PostalCode 
Ecom BillTo Postal CountryCode 
Ecom BillTo. Telecom Phone, Number 
Ecom BillTo. Online Email 


Ecom ReceiptTo Postal Name Prefix 
Ecom ReceiptTo Postal Name First 
Ecom ReceiptTo Postal Name Middle 
Ecom ReceiptTo Postal Name Last 
Ecom ReceiptTo Postal Name Suffix 
Ecom ReceiptTo Postal Company 
Ecom ReceiptTo Postal Street Linel 


Ecom ReceiptTo Postal Street Line2 
Ecom ReceiptTo Postal Street Line3 
Ecom ReceiptTo Postal City 

Ecom ReceiptTo Postal StateProv 
Ecom ReceiptTo Postal PostalCode 
Ecom ReceiptTo Postal CountryCode 


Ecom ReceiptTo Telecom Phone Number 


Ecom ReceiptTo Online Fmail 
Ecom Payment. Card Name 


Ecom Payment Card Type 

Ecom Payment. Card Number 

Ecom Payment. Card Verification 
Ecom Payment Card IssueNumber 


Ecom Payment Card ExpDate Day 
Ecom Payment Card ExpDate Month 
Ecom Payment Card ExpDate Year 
Ecom Payment Card ValidFrom Day 
Ecom Payment. Card ValidFrom Month 
Ecom Payment Card ValidFrom Year 


Standards Track 


June 2005 
4 ( 1) 
15 (54) 
15 ( 2) 
15 (54) 
4 (3) 
20 
20 (4) 
20 (4) 
20 (4) 
22 
2 (5) 
14 ( 6) 
2 ( 7) 
10 ( 8) 
40 ( 9) 
(32) 
4 ( 1) 
15 (54) 
1:5 ( 2) 
15 (54) 
4 (3) 
20 
20 ( 4) 
20 ( 4) 
20 ( 4) 
22 
2 (5) 
14 ( 6) 
2 ( 7) 
10 ( 8) 
40 (9) 
30 (10) 
4 (11) 
19 (12) 
4 (13) 
2 (53) 
2 (14) 
2», 45) 
4 (16) 
2 (14) 
2 (15) 
4 (16) 


[Page 5] 


RFC 4112 


ECML v2 Specification 


card protocols 


card 
card 
card 
card 
card 
card 
card 
card 
card 
card 


loyalty 
loyalty 
loyalty 
loyalty 
loyalty 
loyalty 
loyalty 
loyalty 
loyalty 
loyalty 


name 
type 

number 
verification 
expire day 
expire month 
expire year 
valid day 
valid month 
valid year 


consumer order ID 


user ID 
user 
user 
user 
user 
user 
user 
user 
user 
user 


data 
data 
data 
data 
data 
data 
data 


password 
certificate 
country 
language 
gender 
birth day 
birth month 
birth year 
preferences 


schema version 


wallet id 
wallet URL 


customer device ID 
customer device type 


end transaction flag 


The following fields are 


merchant to the consumer: 


FIELD 


merchant home domain 
processor home domain 


transaction 
transaction 
transaction 
transaction 
transaction 
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identifier 
URL inquiry 
amount 
currency 
date 


Ecom_Payment_Card_Protocol 


Ecom_Loyalty_Card_Name 
Ecom_Loyalty_Card_Type 
Ecom_Loyalty_Card_Number 
Ecom_Loyalty_Card_Verification 
Ecom_Loyalty_Card_ExpDate_Day 
Ecom_Loyalty_Card_ExpDate_Month 
Ecom_Loyalty_Card_ExpDate_Year 
Ecom_Loyalty_Card_ValidFrom_Day 
Ecom_Loyalty_Card_ValidFrom_Month 
Ecom_Loyalty_Card_ValidFrom_Year 


Ecom_ConsumerOrderID 


Ecom_User_ID 
Ecom_User_Password 
Ecom_User_Certificate_URL 
Ecom_UserData_Country 
Ecom_UserData_Language 
Ecom_UserData_Gender 
Ecom_UserData_BirthDate_Day 
Ecom_UserData_BirthDate_Month 
Ecom_UserData_BirthDate_Year 
Ecom_UserData_Preferences 


Ecom_SchemaVersion 


Ecom_WalletID 
Ecom_Wallet_Location 


Ecom_Device_ID 
Ecom_Device_Type 


Ecom_TransactionComplete 


June 2005 
20 (17) 
30 (10) 
20 (52) 
40 (34) 

4 (13) 
2 (14) 
2 (15) 
2 (16) 
2 (14) 
2 (15) 
4 (16) 
20 (18) 
40 (19) 
20 (19) 
128 (55) 
2 ( 7) 
30 (33) 
1 (36) 
2 (14) 
2 (15) 
4 (16) 
60 (34) 
30 (20) 
40 (21) 

128 (35) 
20 (37) 
20 (38) 

= (22) 


typically used to communicate from the 


NAME 


Ecom_Merchant 

Ecom_Processor 
Ecom_Transaction_ID 
Ecom_Transaction_Inquiry 
Ecom_Transaction_Amount 
Ecom_Transaction_CurrencyCode 
Ecom_Transaction_Date 


Standards Track 


Min 


Notes 


NMNNNNNN NH 
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transaction type Ecom Transaction Type 24 (30) 
transaction signature Ecom Transaction Signature 160 (31) 
end transaction flag Ecom TransactionComplete => 422) 


The following fields are used to communicate between the 


merchant and 


a processor acting for the merchant (such a processor is commonly 
called an acguirer and is freguently a bank): 

FIELD NAME Min Notes 
merchant identifier Ecom Merchant. ID 8 
merchant terminal Ecom Merchant. Terminal ID 8 (39) 
merchant terminal data Ecom Merchant. Terminal Data 128 
transaction process code Ecom Transaction ProcessingCode 6 (40) 
transaction reference Ecom_Transaction_Reference_ID 12 
transaction acquirer Ecom Transaction_Acquire_ID 13 (41) 
transaction forward Ecom Transaction_Forward_ID 13 (42) 
transaction trace Ecom Transaction_Trace_Audit 6 (43) 
transaction effective date Ecom Transaction Effective. Date 4 (44) 
transaction CID Ecom Transaction_CID 8 
transaction POS Ecom Transaction_POSCode 12 (45) 
transaction private use Ecom Transaction_PrivateUseData 166 
transaction response Ecom Transaction ResponseData DA 
transaction approval code Ecom Transaction ApprovalCode 12 (46) 
transaction retrieval code Ecom_Transaction_RetrievalCode 128 
transaction response action Ecom Transaction ActionCode 13 (47) 
transaction reason Ecom_Transaction_ReasonCode 4 
transaction AAV Ecom_Transaction_AAV 3 
transaction settlement date Ecom_Transaction_Settle_Date 4 (48) 
transaction capture date Ecom_Transaction_Capture_Date 4 (49) 
transaction Track 1 Ecom_Transaction_Trackl 39 (50) 
transaction Track 2 Ecom_Transaction_Track2 39 (51) 
2.1.2. Field Footnotes 

(1) For example: Mr., Mrs., Ms., Dr. This field is commonly 
omitted. 

(2) May also be used for middle initial. 

(3) For example: Ph.D., Jr. (Junior), 3rd, Esq. (Esquire). This 
field is commonly omitted. 

(4) Address lines must be filled in the order linel, then line2, and 


last line3. Thus, for example, 
null if line2 or line3 is not. 


Eastlake 3rd 
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it is an error for linel to be 
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2 characters are the minimum for the US and Canada; other 
countries may require longer fields. For the US, use 2- 
character US postal state abbreviation. 


Minimum field lengths for Postal Code will vary according to the 
international market served. Use 5-character postal code or 5+4 
ZIP for the US and 6-character postal code for Canada. The size 
given, 14, is believed to be the maximum reguired anywhere in 
the world. 


Use [1503166] standard two letter country codes. 


10 digits are the minimum for numbers within the North American 
Numbering Plan (<http://www.nanpa.com>: It includes the US, 
Canada and a number of Caribbean and smaller Pacific nations, 
but not Cuba). Other countries may reguire longer fields. 
Telephone numbers are complicated by differing international 
access codes, variant punctuation of area/city codes within 
countries, etc. Although it is desirable for telephone numbers 
to be in standard international format [E.164], it may be 
necessary to use heuristics or human examination based on the 
telephone number and addresses given to figure out how to call a 
customer, since people may enter local formatted numbers without 
area/access codes. It is recommend that an "x" be placed before 
extension numbers and that the "x" and extension number appear 
after all other parts of the number. 


For example:  jsmithlexample.com 
The name of the cardholder as it appears on the card. 


Case insensitive. Use up to the first 4 letters of the 
association name (see also Note 102): 


AMER American Express 
BANK Bankcard (Australia) 
DC DC (Japan) 

DINE Diners Club 

DISC Discover 

JCB JCB 

MAST Mastercard 

NIKO Nikos (Japan) 
SAIS Saison (Japan) 
UC UC (Japan) 

UCAR UCard (Taiwan) 
VISA Visa 
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(12) Includes the check digit at the end but no spaces or hyphens 
[1507812]. The min given, 19, is the longest number permitted 
under the ISO standard. 


(13) An additional cardholder verification number printed on the card 
(but not embossed or recorded on the magnetic stripe) such as 
the American Express CIV, MasterCard CVC2, and Visa CVV2 values. 


(14) The day of the month. Values: 1-31. A leading zero is ignored, 
so, for example, 07 is valid for the seventh day of the month. 


(15) The month of the year. Jan - 1, Feb - 2, March - 3, etc.; 
Values: 1-12. A leading zero is ignored, so, for example, 07 is 
valid for July. 


(16) The value in the wallet cell is always four digits; e.g., 1999, 
2000, 2001. 


(17) A space separated list of protocols available in connection with 
the specified card. The following is the initial list of case- 
insensitive tokens: 


none 
set 
setcert 
iotp 
echeck 
simcard 
phoneid 


"Set" indicates that the card is usable with SET protocol (i.e., 
it is in a SET wallet) but that it does not have a SET 
certificate [SET]. "Setcert" indicates that the card is usable 
with SET and has a set certificate [SET]. "iotp" indicates that 
the IOTP protocol [RFC2801] is supported at the customer. 
"echeck" indicates that the eCheck protocol [eCheck] is 
supported at the customer. "simcard" indicates an ability to 
use the transaction instrument built into a Cellphone subscriber 
for identification. "phoneid" indicates use for the transaction 
of a billable phone number. "None" indicates that automatic 
field fill is operating but that there is no further 
information. 


(18) A unique order ID string generated by the consumer software. 
(19) The user ID and password fields can be used if the user has a 


pre-established account with the merchant to which access is 
authenticated by such values. For that use, one would expect an 
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application to reguire exactly one user ID, and one password 
field be present. 


(20) URI [RFC3986] indicating version of this set of fields. Equal 
to "urn:ietf:params:ecml:v2.0" for this version. See Section 5. 
(See also Note 101.) 


(21) A string to identify the source and version of form fill 


software that is acting on behalf of a user. Should contain 
company and/or product name and version; for example, "Wallets 
Inc., SuperFill, v42.7". (See also Note 101.) 


(22) A flag to indicate that this web-page/aggregate is the final one 
for this transaction. (See also Note 101.) 


(23) The merchant domain name [RFC1034], such as 
www.merchant.example. (See also Note 101.) 


(24) The domain name [RFC1034] of the gateway transaction processor 
that is actually accepting the payment on behalf of the 
merchant, such as www.processor.example. (See also Note 101.) 


(25) A Transaction identification string whose format is specific to 
the processor. 


(26) A URL [RFC3986] that can be invoked to inquire about the 
transaction. (See also Note 100.) 


(27) The amount of the transaction in ISO currency format [1S04217]. 
This is two integer numbers with a period in between but with no 


other currency mark (such as a "$" dollar sign). 


(28) This is the three-letter ISO currency code [1504217]. For 
example, US dollars is USD. 


(29) ISO Transaction date. 


(30) The type of the transaction, if known. Currently a value from 
the following list: 


debit 
credit 


(31) A digital signature, base64 encoded [RFC2045]. (See also Note 
101.) 
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The ReceiptTo fields are used when the BillTo entity, location, 
or address and the ReceiptTo entity, location, or address are 
different. For example, when using some forms of Corporate 
Purchasing Cards or Agent Purchasing Cards, the individual card 
holder would be in the ReceiptTo fields, and the corporate or 
other owner would be in the BillTo fields. 


An IETF Language Tag, as defined in [RFC3066]. 


User preferences, 
102.) 


as specified by the merchant. (See also Note 


The Uniform Resource Locator [RFC3986] 
customer’s "wallet" software. 


for accessing the 
(See also Note 100) 

A single capital letter: M=male, F=Female, U=Unknown [1505218]. 
An immutable device identification or serial number. 
Note 102.) 


(See also 


User understandable device brand name. (See also Note 102) 


[1508583] field "card acceptor terminal identification". 
[1508583] field "processing code". 

[1508583] field "acquiring institution identification code". 
[1508583] field "forwarding institution identification code". 
[1508583] field "system trace audit field". 

[1508583] field "date effective". 

[1508583] field "point of sale date code". 

[1508583] field "approval code". 

[1508583] field "action code". 

[1S08583] field "date settlement". 

[1508583] field "date capture". 

[1508583] field "trace 1 data". 

[1508583] field "trace 2 data". 
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(52) User-recognizable loyalty card brand name. Values for this 
field are not controlled, and there is no IANA or other registry 
for them. (See also Note 102.) 


(53) The card issuer number reguired by the UK-based Switch and Solo 
acguirers. 


(54) The field names "first name" and "last name" have been retained 
for compatibility with earlier versions of ECML. However, 
"last name" should be understood to refer to family or inherited 
names(s), whereas "first name" is the first given or non- 
inherited name and "middle name" is the subseguent given or 
non-inherited name or names, if any. 


(55) The Uniform Resource Locator [RFC3986] for accessing the user's 
X.509v3 certificate encoded as binary DER. (See also Note 100.) 


Meta Notes (referenced by other notes) 


(100) ECML, a basic field-naming and structuring convention, does not 
impose any particular requirements on these URLs. It is to be 
expected that most applications that make use of ECML will 
impose such limitations and perform checking to be sure that 
provided URLs conform to such limitations before attempting to 
invoke them. 


(101) This is a field that, when presented in a web page, is usually 
hidden. 


(102) An ASCII [ASCII] character string with no leading or trailing 
white space. 


2.2. Exemplar XML Syntax 


The following sections provide an XML DID and an XML Schema that 
express the ECML fields with ECML v2 naming and ECML v2 hierarchical 
structure. In case of conflict between this DTD and Schema, the 
Schema should prevail. Note that the ECML v2 naming and structure 
may be used in non-XML syntaxes. 


The ECML v2 XML syntax is deliberately liberal because it is assumed 
that specific applications making use of ECML will impose their own 
additional constraints. 


For internationalization of ECML, use the general XML character- 
encoding provisions [XML] (which mandate support of UTF-8 and UTF-16 
and permit support of other character sets) and the xml:lang 
attribute, which may be used to specify language information. 
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2.2.1. ECML v2 XML DTD 
The following is an XML DTD for ECML v2. 
<!-- Electronic Commerce Modeling Language v2 --> 
<!ELEMENT Ecom ( #PCDATA | ShipTo | BillTo | ReceiptTo | Payment 
Loyalty | User | Merchant | Transaction | 


TransactionComplete )* > 
<!ATTLIST Ecom 


id ID # IMPLIED 

ConsumerOrderID CDATA #IMPLIED 

Merchant CDATA # IMPLIED 

Mode (Query|Assert) #IMPLIED 

Processor CDATA # IMPLIED 

SchemaVersion (urn:ietf:params:ecml:v2.0) 
# IMPLIED 

WalletID CDATA # IMPLIED 

WalletLocation CDATA #IMPLIED > 


<!ELEMENT ShipTo ( #PCDATA | Postal | Telecom | Online )* > 
<!ATTLIST ShipTo 


id ID + IMPLIED 

Mode (Query|Assert) #IMPLIED > 
<!ELEMENT BillTo ( #PCDATA | Postal | Telecom | Online )* > 
<!ATTLIST BillTo 

id ID + IMPLIED 

Mode (Query|Assert) #IMPLIED > 


<!ELEMENT ReceiptTo ( #PCDATA | Postal | Telecom Online )* > 


<!ATTLIST ReceiptTo 
id ID + IMPLIED 
Mode (Query|Assert) #IMPLIED > 


<!ELEMENT Postal ( #PCDATA | Name | Company | 
Street | City | StateProv )* > 
<!ATTLIST Postal 


id ID “IMPLIED 
PostalCode NMTOKEN #IMPLIED 
Mode (Query|Assert) #IMPLIED 


CountryCode NMTOKEN #IMPLIED > 


<!ELEMENT Name EMPTY > 

<!ATTLIST Name 
id ID + IMPLIED 
Mode (Query|Assert) #IMPLIED 
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<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 


<!ATTLIST 


<!ELEMENT 


<!ATTLIST 


<!ELEMENT 


ECML v2 Specification 
Prefix NMTOKEN #IMPLIED 
First NMTOKEN #IMPLIED 
Middle NMTOKEN #IMPLIED 
Last NMTOKEN #IMPLIED 
Suffix NMTOKEN #IMPLIED > 
Street EMPTY > 
Street 
id ID + IMPLIED 
Mode (Query|Assert) “IMPLIED 
Linel CDATA +REQUIRED 
Line2 CDATA + IMPLIED 
Line3 CDATA #IMPLIED > 
Company (#PCDATA) > 
Company 
Mode (Query|Assert) #IMPLIED 
City (#PCDATA) > 
City 
Mode (Query|Assert) #IMPLIED 
StateProv (#PCDATA) > 


StateProv 
Mode (Query|Assert) #IMPLIED 


Telecom ( #PCDATA | Phone )* > 
Telecom 


Mode (Query|Assert) #IMPLIED 


Phone EMPTY > 


Phone 

id ID “IMPLIED 

Mode (Ouery |Assert) “IMPLIED 
Number CDATA #REQUIRED > 
Online ( #PCDATA | Email )* > 


Online 


Mode (Query|Assert) #IMPLIED > 


Email EMPTY > 


<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


Eastlake 3rd 


Email 

id ID #IMPLIED 

Mode (Query |Assert) #IMPLIED 
Address CDATA #REQUIRED > 
Payment (Card) > 


Payment 
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<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 
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Mode (Query|Assert) +IMPLIED > 
Card (ExpDate, ValidDate?) > 

Card 

id ID + IMPLIED 
Mode (Query |Assert) “IMPLIED 
Name CDATA + IMPLIED 
Type NMTOKEN + IMPLIED 
Number NMTOKEN #REQUIRED 
Protocols NMTOKENS #IMPLIED 
Verification NMTOKEN #IMPLIED 
Issuer NMTOKEN #IMPLIED > 


Loyalty (Exp 


Loyalty 

id ID #IMPLIED 

Mode (Query|Assert) #IMPLIED 
Name CDATA #IMPLIED 

Type NMTOKEN #IMPLIED 
Number NMTOKEN  #REQUIRED 


Date?, ValidDate?) > 


Verification NMTOKEN #IMPLIED > 


ExpDate EMPTY > 

ExpDate 

id ID #IMPLIED 

Mode (Query|Assert) #IMPLIED 
Day NMTOKEN #IMPLIED 
Month NMTOKEN #REQUIRED 
Year NMTOKEN #REQUIRED > 
ValidDate EMPTY > 


ValidDate 

id ID #IMPLIED 

Mode (Query|Assert) #IMPLIED 

Day NMTOKEN #IMPLIED 

Month NMTOKEN #IMPLIED 

Year NMTOKEN  #REQUIRED > 

User ( #PCDATA | UserID | Password )* > 


User 
id 
Mode 


ID 


(Query|Assert) #IMPLIED 
CertificateURL CDATA #IMPLIED 


+ IMPLIED 


+ IMPLIED 


DataCountry NMTOKEN 
DataLanguage CDATA 


UserID (#PCDATA) > 
UserID 


Standar 


#IMPLIED > 
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<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 


<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


Eastlake 3rd 


Mode (Query |Assert) #IMPLIED > 

Password (#PCDATA) > 

Password 

Mode (Query |Assert) IMPLIED > 

Merchant (Terminal) > 

Merchant 

Mode (Query |Assert) “IMPLIED 

id ID #IMPLIED > 

Terminal EMPTY > 

Terminal 

Id ID + IMPLIED 

Mode (Query |Assert) #IMPLIED 

Data CDATA IMPLIED > 

Transaction ( #PCDATA | Id | Code | Date 
Inguiry | Signature )* > 

Transaction 

Amount CDATA + IMPLIED 

Currency NMTOKEN + IMPLIED 

Mode (Query|Assert) “IMPLIED 

Type NMTOKEN #IMPLIED > 

Id EMPTY > 

Id 

Id ID + IMPLIED 

Mode (Query|Assert) +IMPLIED 

CID NMTOKEN + IMPLIED 

Reference NMTOKEN + IMPLIED 

Acquire NMTOKEN + IMPLIED 

Forward NMTOKEN #IMPLIED > 

Code EMPTY > 

Code 

Mode (Query|Assert) +IMPLIED 

Processing CDATA + IMPLIED 

Approval NMTOKEN + IMPLIED 

Retrieval NMTOKEN + IMPLIED 

Action NMTOKEN + IMPLIED 

Reason NMTOKEN #IMPLIED 

POS NMTOKEN #IMPLIED > 

Date (Effective?, Settle?, Capture?) 

Date 

Mode (Query|Assert) #IMPLIED 

id ID #IMPLIED > 


ECML v2 Specification 
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<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 


<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


<!ELEMENT 
<!ATTLIST 


Eastlake 3rd 


ECML v2 Specification 


Effective EMPTY > 


Effective 

id ID #IMPLIED 

Mode (Query |Assert) #IMPLIED 
Day NMTOKEN  4REQUIRED 
Month NMTOKEN  #REQUIRED 
Year NMTOKEN  #REQUIRED > 
Settle EMPTY > 

Settle 

id ID * IMPLIED 

Mode (Query|Assert) “IMPLIED 
Day NMTOKEN #REQUIRED 
Month NMTOKEN #REQUIRED 
Year NMTOKEN #REQUIRED > 
Capture EMPTY > 

Capture 

id ID #IMPLIED 

Mode (Query |Assert) IMPLIED 
Day NMTOKEN  4REQUIRED 
Month NMTOKEN  #REQUIRED 
Year NMTOKEN  +REQUIRED > 


AAV | Trackl | Track2 )* > 


Data 
Mode (Query|Assert) “IMPLIED 
Trace (#PCDATA) > 


Trade 

id ID “IMPLIED 
Mode (Query|Assert) IMPLIED 
PrivateUse (*PCDATA) > 


PrivateUse 

id ID + IMPLIED 
Mode (Query |Assert) + IMPLIED 
Response (#PCDATA) > 

Response 

id ID + IMPLIED 
Mode (Query |Assert) + IMPLIED 
AAV (*PCDATA) > 

AAV 

id ID + IMPLIED 
Mode (Query |Assert) + IMPLIED 
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<!ELEMENT Trackl (#PCDATA) > 
<!ATTLIST Trackl 

id ID 

Mode (Query |Asse 
<!ELEMENT Track2 (#PCDATA) > 
<!ATTLIST Track2 

id ID 

Mode (Query|Asse 


2 


E2 


<!ELEMENT Inquiry (#PCDATA) > 
<!ATTLIST Inquiry 

id ID 

Mode (Query |Asse 


<!ELEMENT Signature (*PCDATA) > 
<!ATTLIST Signature 

id ID 

Mode (Query |Asse 


ification 


+ IMPLIED 
rt) IMPLIED 


+ IMPLIED 
rt) IMPLIED 


+ IMPLIED 
rt) IMPLIED 


+ IMPLIED 
rt) IMPLIED 


<!ELEMENT TransactionComplete EMPTY > 


.2. ECML v2 XML Schema 
The following is an XML Schema for 


<?xml version="1.0" encoding="utf- 


<!-- Electronic Commerce Modeling Language v2 --> 


<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" 


elementFormDefault="qualified"> 


<xs:attribute name="Mode"> 
<xs:simpleType> 


ECML v2. 


8"?> 


<xs:restriction base="xs:string"> 
<xs:enumeration value="Query"/> 
<xs:enumeration value="Assert"/> 


</xs:restriction> 
</xs:simpleType> 
</xs:attribute> 
<xs:attribute name="id" type="xs 
<xs:complexType name="EcomSimple 
<xs:simpleContent> 
<xs:extension base="xs:strin 


<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 


</xs:extension> 
</xs:simpleContent> 


Eastlake 3rd Standards 


:ID"/> 
Text"> 
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</xs:complexType> 


<xs:element name="Ecom"> 
<xs:complexType mixed="true"> 
<xs:choice minOccurs="0" maxOccurs="unbounded"> 


<xs:element ref="ShipTo"/> 

<xs:element ref="BillTo"/> 

<xs:element ref="ReceiptTo"/> 

<xs:element ref="Payment"/> 

<xs:element ref="Loyalty"/> 

<xs:element ref="User"/> 

<xs:element ref="Merchant"/> 

<xs:element ref="Transaction"/> 

<xs:element ref="TransactionComplete"/> 
</xs:choice> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="ConsumerOrderID" use="optional"/> 
<xs:attribute name="Merchant" use="optional"/> 
<xs:attribute name="Processor" use="optional"/> 
<xs:attribute name="SchemaVersion" type="xs:string" 


fixed="urn:ietf:params:ecml:v2.0"/> 
<xs:attribute name="WalletID" use="optional"/> 
<xs:attribute name="WalletLocation" type="xs:anyURI" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="ShipTo"> 
<xs:complexType mixed="true"> 


<xs:choice minOccurs="0" 


<xs:element 

<xs:element 

<xs:element 
</xs:choice> 
<xs:attribute 
<xs:attribute 


maxOccurs="unbounded"> 
ref="Postal"/> 

ref="Telecom"/> 

ref="Online"/> 


ref="Mode" use="optional"/> 
ref="id" use="optional"/> 


</xs:complexType> 


</xs:element> 


<xs:element name="BillTo"> 
<xs:complexType mixed="true"> 


<xs:choice minOccurs="0" 


<xs:element 

<xs:element 

<xs:element 
</xs:choice> 
<xs:attribute 


maxOccurs="unbounded"> 
ref="Postal"/> 

ref="Telecom"/> 

ref="Online"/> 


<xs:attribute 


ref="Mode" use="optional"/> 
ref="id" use="optional"/> 


</xs:complexType> 
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</xs:element> 
<xs:element name="ReceiptTo"> 
<xs : complexType mixed="true"> 
<xs:choice minOccurs="0" maxOccurs="unbounded"> 
<xs:element ref="Postal"/> 
<xs:element ref="Telecom"/> 
<xs:element ref="Online"/> 
</xs:choice> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Postal"> 
<xs:complexType mixed="true"> 
<xs:choice minOccurs="0" maxOccurs="unbounded"> 
<xs:element ref="Name"/> 
<xs:element ref="Company"/> 
<xs:element ref="Street"/> 
<xs:element ref="City"/> 
<xs:element ref="StateProv"/> 
</xs:choice> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="PostalCode" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="CountryCode" type="xs:NMTOKEN" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Telecom"> 
<xs:complexType mixed="true"> 
<xs:sequence maxOccurs="unbounded"> 
<xs:element name="Phone"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Number"/> 
</xs:complexType> 
</xs:element> 
</xs:sequence> 
<xs:attribute ref="Mode" use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Online"> 
<xs:complexType mixed="true"> 
<xs:sequence maxOccurs="unbounded"> 
<xs:element name="Email"> 
<xs:complexType> 
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<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Address"/> 
</xs:complexType> 
</xs:element> 
</xs:seguence> 
<xs:attribute ref="Mode" use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Payment"> 
<xs:complexType> 
<xs:sequence> 
<xs:element name="Card"> 
<xs:complexType> 
<xs:sequence> 
<xs:element ref="ExpDate"/> 
<xs:element ref="ValidDate" minOccurs="0"/> 
</xs:sequence> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Name" use="optional"/> 
<xs:attribute name="Type" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Number" type="xs:decimal"/> 
<xs:attribute name="Protocols" type="xs:NMTOKENS" 
use="optional"/> 
<xs:attribute name="Verification" 
type="xs:NMTOKEN" use="optional"/> 
<xs:attribute name="Issuer" type="xs:NMTOKEN" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
</xs:sequence> 
<xs:attribute ref="Mode" use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Loyalty"> 
<xs:complexType> 
<xs:sequence> 
<xs:element ref="ExpDate"/> 
<xs:element ref="ValidDate" minOccurs="0"/> 
</xs:sequence> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Name" use="optional"/> 
<xs:attribute name="Type" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Number" type="xs:NMTOKEN"/> 
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<xs:attribute name="Verification" type="xs:NMTOKEN" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="ExpDate"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Day" type="xs:positivelnteger"/> 
<xs:attribute name="Month" type="xs:positivelnteger"/> 
<xs:attribute name="Year" type="xs:positivelnteger"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="ValidDate"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Day" type="xs:positivelnteger"/> 
<xs:attribute name="Month" type="xs:positivelnteger"/> 
<xs:attribute name="Year" type="xs:positivelnteger"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="User"> 
<xs:complexType mixed="true"> 
<xs:choice minOccurs="0" maxOccurs="unbounded"> 
<xs:element ref="UserID"/> 
<xs:element ref="Password"/> 
</xs:choice> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="CertificateURL" type="xs:anyURI" 
use="optional"/> 
<xs:attribute name="DataCountry" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="DataLanguage" type="xs:language" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Transaction"> 
<xs:complexType mixed="true"> 
<xs:choice minOccurs="0" maxOccurs="unbounded"> 
<xs:element ref="Id"/> 
<xs:element ref="Code"/> 
<xs:element ref="Date"/> 
<xs:element ref="Data"/> 
<xs:element ref="Inquiry"/> 
<xs:element ref="Signature"/> 
</xs:choice> 
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<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute name="Currency" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Type" type="xs:NMTOKEN" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Date"> 
<xs:complexType> 
<xs:sequence> 
<xs:element ref="Effective" minOccurs="0"/> 
<xs:element ref="Settle" minOccurs="0"/> 
<xs:element ref="Capture" minOccurs="0"/> 
</xs:sequence> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Data"> 
<xs:complexType mixed="true"> 
<xs:choice minOccurs="0" maxOccurs="unbounded"> 
<xs:element ref="Trace"/> 
<xs:element ref="PrivateUse"/> 
<xs:element ref="Response"/> 
<xs:element ref="AAV"/> 
<xs:element ref="Track1"/> 
<xs:element ref="Track2"/> 
</xs:choice> 
<xs:attribute ref="Mode" use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Merchant"> 
<xs:complexType> 
<xs:sequence> 
<xs:element name="Terminal"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Data" use="optional"/> 
</xs:complexType> 
</xs:element> 
</xs:sequence> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
</xs:complexType> 
</xs:element> 


<xs:element name="AAV" type="EcomSimpleText"/> 
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<xs:element name="Capture"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Day" type="xs:NMTOKEN" /> 
<xs:attribute name="Month" type="xs:NMTOKEN" /> 
<xs:attribute name="Year" type="xs:NMTOKEN" /> 
</xs:complexType> 
</xs:element> 
<xs:element name="City" type="EcomSimpleText"/> 
<xs:element name="Code"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute name="Processing" use="optional"/> 
<xs:attribute name="Approval" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Retrieval" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Action" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Reason" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="POS" type="xs:NMTOKEN" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Company" type="EcomSimpleText"/> 
<xs:element name="Effective"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Day" type="xs:NMTOKEN" /> 
<xs:attribute name="Month" type="xs:NMTOKEN" /> 
<xs:attribute name="Year" type="xs:NMTOKEN"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Id"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="CID" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Reference" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Acguire" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Forward" type="xs:NMTOKEN" 
use="optional"/> 
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</xs:complexType> 
</xs:element> 
<xs:element name="Inguiry"> 
<xs:complexType> 
<xs:simpleContent> 
<xs:extension base="xs:anyURI"> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
</xs:extension> 
</xs:simpleContent> 
</xs:complexType> 
</xs:element> 
<xs:element name="Name"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Prefix" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="First" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Middle" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Last" type="xs:NMTOKEN" 
use="optional"/> 
<xs:attribute name="Suffix" type="xs:NMTOKEN" 
use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Password" type="EcomSimpleText"/> 
<xs:element name="PrivateUse" type="EcomSimpleText"/> 
<xs:element name="Response" type="EcomSimpleText"/> 
<xs:element name="Settle"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Day" type="xs:NMTOKEN" /> 
<xs:attribute name="Month" type="xs:NMTOKEN" /> 
<xs:attribute name="Year" type="xs:NMTOKEN"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Signature"> 
<xs:complexType> 
<xs:simpleContent> 
<xs:extension base="xs:string"> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
</xs:extension> 
</xs:simpleContent> 
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</xs:complexType> 
</xs:element> 
<xs:element name="StateProv" type="EcomSimpleText"/> 
<xs:element name="Street"> 
<xs:complexType> 
<xs:attribute ref="Mode" use="optional"/> 
<xs:attribute ref="id" use="optional"/> 
<xs:attribute name="Linel"/> 
<xs:attribute name="Line2" use="optional"/> 
<xs:attribute name="Line3" use="optional"/> 
</xs:complexType> 
</xs:element> 
<xs:element name="Trace" type="EcomSimpleText"/> 
<xs:element name="Track1" type="EcomSimpleText"/> 
<xs:element name="Track2" type="EcomSimpleText"/> 
<xs:element name="TransactionComplete"> 
<xs:complexType/> 
</xs:element> 
<xs:element name="UserID" type="EcomSimpleText"/> 


</xs:schema> 
3. Usage Notes for ECML v2 

This section provides a general usage guide for ECML v2. 
3.1. Presentation of the Fields 


ECML v2 merely names fields and specifies their content and 
hierarchical organization. It does not constrain the order or 
completeness of communication of or query for these fields. 


Some parties may wish to provide or ask for more information, and 
some for less by omitting fields. Some may ask for the information 
they want in one interaction or web page, and others may ask for 
parts of the information at different times in multiple interactions 
or different web pages. For example, it is common to ask for "ship 
to" information earlier so that the shipping cost can be computed 
before the payment method information. Some parties may require that 
all the information they request be provided whereas others may make 
much of the information optional. Other variations are likely. 


Every element may be flagged as a query or assertion by including, 
when XML syntax is in use, the optional Mode attribute with the value 
"Query" or "Assert" respectively. The Mode attribute effects all 
descendant elements until overridden by a lower level element with a 
Mode attribute. Thus it is easy to indicate that all of the elements 
in an ECML v2 structure are present as queries or assertions. 
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Query elements may have data content. Such content SHOULD be 
interpreted as a default value to be returned if no better value is 
known. 


There is no way with Version 2.0 of ECML to indicate what query 
fields a party considers mandatory to be answered. From this point 
of view, all fields gueried are optional to complete. However, a 
party may give an error or re-present a reguest for information if 
some field it reguires is not completed, just as it may if a field is 
completed in a manner that it considers erroneous. 


3.2. Methods and Flow of Setting the Fields 


A variety of methods of communication is possible between the parties 
by which each can indicate what fields it wants the other to provide. 
Probably the easiest method for currently deployed mass software is 
through fields in an [HTML] form. Other possibilities include using 
an [XML] exchange, the IOTP Authenticate transaction [RFC2801], or 
proprietary protocols. 


So that browser software can tell what version it is dealing with, it 
is REQUIRED that the Ecom_SchemaVersion field be included in every 
transaction when ECML is being used on the web. Ecom_SchemaVersion 
SHOULD appear on every web page that has any Ecom fields. It is 
usually a hidden field in HTML Forms. 


User action or the appearance of the Ecom_SchemaVersion field are 
examples of triggers that can be used to initiate a facility capable 
of providing information in response to an ECML-based query or of 
using information from ECML assertions. Because some web software 
may require user activation, it is RECOMMENDED that there be at least 
one user-visible Ecom field on every web page with any Ecom fields 
present when ECML is used via the web. 


Under some circumstances, communications can proceed very slowly, so 
it may not be clear to an automated processing function when it is 
finished receiving ECML fields on a web page or the like. For this 
reason, it is RECOMMENDED that the Ecom_SchemaVersion field be the 
last Ecom field on a web page. 


Transfer or requests for information can extend over several 
interactions or web pages. Without further provision, a facility 
could either require re-starting on each page or possibly violate or 
appear to violate privacy by continuing to provide personal data 


beyond the end of the transaction with a particular business. For 
this reason, the Ecom_TransactionComplete field, which is normally 
hidden when it is part of an HTML Form, is provided. It is 


RECOMMENDED that it appear on the last interaction or web page 
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involved in a transaction, just before an Ecom SchemaVersion field, 
so that multi-interaction automated logic receives a hint as to when 
to stop if it chooses to check for this field. 


4. Security and Privacy Considerations 


The information called for by many of these fields is sensitive. It 
should be protected from unauthorized modification and kept 
confidential if it is stored in a location or transmitted over a 
channel where it might otherwise be observed. In addition, the 
authenticity of the information will be a concern in many Systems. 


Mechanisms for such protection and authentication are not specified 
herein but might, depending on circumstances, include object security 
protocols (such as XMLDSIG [RFC3275], XML encryption [XMLENC], or CMS 
[RFC3852]), or channel security (such as TLS [RFC2246] or IPSec 


[RFC2411]). Systems in which an ECML field or fields are stored and 
later forwarded will likely find object security the most 
appropriate. 


When information is being reguested from a user, the user's control 
over the release of such information is needed to protect the user's 
privacy. 


Software that is installed on shared or public terminals should be 
configurable so that memory of any sensitive or individual identity 
information is fully disabled. This is vital to protect the privacy 
of library patrons, students, and customers using public terminals, 
and of children who might, for example, use a form on a public 
terminal without realizing that their information is being stored. 


When sensitive or individual identification information is stored, 
the operator or user should have an option to protect the 
information; for example, with a password without which the 
information will be unavailable, even to someone who has access to 
the file(s) in which it is being stored. 


Any multi-page/screen or other multi-aggregate field fill-in or data 
provision mechanism SHOULD check for the Ecom TransactionComplete 
field and cease automated fill when it is encountered until fill is 
further authorized. 


It should be remembered that default, hidden, and other values 


transferred to another party may be maliciously modified before being 
returned. 
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5. IANA Considerations 


The sections below provide for: 


1. registration of the ECML v2 XML schema contained in this 
document, 

2. aversion URN for ECML versions, 

3. the subsidiary registration of particular ECML versions and the 


specific registration of Version 2.0, and 


4. three additional IANA registries for elements appearing in three 
ECML v2 fields. 


5.1. ECML v2 Schema Template 


The ECML v2 schema give in Section 2.2.2 above is registered as 
follows: 


URI: urn:ietf:params:xml:schema:ECMLv2 
Registrant Contact: The IESG <iesg@ietf.org> 
XML: The XML Schema in Section 2.2.2 above. 
5.2. ECML v2 URN Template 
As specified by the template below from [RFC3553], 
urn:ietf:params:ecml is permanently registered with sub-registration 
via RFC publication. 
Registry name: urn:ietf:params:ecml 
Specification: RFC 4112 
Repository: RFC 4112 
Index value: Values subordinate to urn:ietf:params:ecml are 
registered by RFC publication. As provided in 


[RFC3553], once such a value is registered, it may 
never change. 
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5.2.1. Sub-registration of v2.0 


The subordinate value "v2.0" is hereby permanently registered so that 
the URN 


urn:ietf:params:ecml:v2.0 


is used to indicate an ECML field or fields that conform to this 
specification. Although it is not anticipated that deeper values 
subordinate to this URN will need to be registered, if necessary, 
they are registered by IESG approval. 


5.3. IANA Registries 


There are three fields described in Section 2.1.2 that require the 
establishment of IANA registries as described below: 


Ecom_Payment_Card_Type 
A registry of case-insensitive alphanumeric ASCII [ASCII] 
card-type designations from one to four characters in length 
with no white space. See Section 2.1.2, Note 11, for the 
initial 12 designations. Designations are added based on 
expert approval. Applicants for registration will normally be 
required already to have an ISO Issuer Identification Number 
(IIN) or set of IINs. 


Ecom_Payment_Card_Protocol 
This field holds a space-separated list of protocols designated 
by case-insensitive alphanumeric ASCII [ASCII] tokens from this 
registry or holds the token "none". See Section 2.1.2, note 
17, for the initial seven registered tokens (including "none") 
and further information. Tokens are added to the registry 
based on expert approval. 


Ecom_Transaction_Type 
A case-insensitive alphabetic ASCII [ASCII] value indicating 
the type of transaction. See Section 2.1.2, note 30, for the 
initial two registered values. Values are added based on 
expert approval. 
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A. Appendix: Changes from v1.1 to v2 


Substantial rewording of text to change the emphasis from HTML Form 
Fields to XML Syntax. 


Addition of the merchant -> processor fields. 


Addition of the Ecom_Wallet_Location and Ecom_User_Certificate_URL 
fields. 


Addition of the "Mode" attribute. 


Addition of the ECom_Payment_Card_IssueNumber, Loyalty Card fields, 
Device ID, Valid From, and User Data fields. 


Addition of an XML schema. 

Some minor fixes related to telephone numbers. 

Addition of IANA Considerations section. 

Updating of RFC references for obsoleted RFCs. 
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